Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/1/3136372e3234392e31372e302f32342d3234203d3e20323635313538.roa
File:                     3136372e3234392e31372e302f32342d3234203d3e20323635313538.roa (raw, json)
Hash identifier:          HI7PG6aWPTMM+IzNaYpbwTdXWB35GuQP/3WG9sTDa9k=
Subject key identifier:   07:C5:03:53:2D:52:52:43:9F:C3:B5:76:1F:E5:44:7E:E5:DA:24:09
Certificate issuer:       /CN=60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1
Certificate serial:       47250254BE6C671562D6064334B7AEE277AA0A17
Authority key identifier: 60:BB:F5:E5:4F:CB:6B:FB:6E:9B:D8:E5:2A:63:92:FA:F4:D4:C8:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/1/3136372e3234392e31372e302f32342d3234203d3e20323635313538.roa
Signing time:             Fri 05 Apr 2024 02:46:12 +0000
ROA not before:           Fri 05 Apr 2024 02:41:12 +0000
ROA not after:            Fri 04 Apr 2025 02:46:12 +0000
asID:                     265158
IP address blocks:        167.249.17.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:25:02:54:be:6c:67:15:62:d6:06:43:34:b7:ae:e2:77:aa:0a:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1
        Validity
            Not Before: Apr  5 02:41:12 2024 GMT
            Not After : Apr  4 02:46:12 2025 GMT
        Subject: CN=07C503532D5252439FC3B5761FE5447EE5DA2409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5b:8e:9e:bd:53:fe:60:f2:f2:7b:31:cc:6e:
                    18:2d:62:29:f5:20:7c:9d:fc:aa:ca:c5:6e:7f:39:
                    1f:c4:71:e6:0f:ee:96:3f:a0:a2:ea:96:49:06:7a:
                    cb:e1:75:cf:6d:b5:f7:59:40:79:fa:3c:c0:8d:17:
                    80:17:44:c4:bb:5a:0e:af:c4:5c:80:92:ed:63:66:
                    17:a6:1b:4e:84:1d:98:69:92:a5:d3:3e:e6:c6:14:
                    6c:d4:fd:1d:43:df:5b:1b:cd:2c:9e:e0:db:5d:42:
                    04:2f:74:55:dc:fe:e4:a7:05:32:c4:90:1b:90:b3:
                    53:6c:97:87:d7:2d:18:f8:78:1c:83:4a:dd:80:d2:
                    3d:e2:76:d5:58:2e:0b:40:1b:10:d3:d2:f1:a1:f1:
                    9e:f1:76:41:7b:9a:06:2e:f2:b6:11:a3:e9:db:74:
                    29:83:75:96:ed:52:d4:6e:c8:ba:42:35:f0:26:10:
                    54:4d:dd:19:3f:eb:20:ba:b7:50:71:6a:db:c9:f7:
                    cb:97:e1:8b:48:05:3a:8c:fe:38:99:4c:2e:b4:c2:
                    28:49:f8:6d:1b:4d:c5:6b:17:c9:26:7a:07:20:12:
                    25:91:d1:a3:4f:4e:1e:8b:fb:3d:8f:08:7c:44:7a:
                    8c:5e:a3:f7:4d:df:b6:b0:bc:e9:d0:61:01:d1:0d:
                    b9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C5:03:53:2D:52:52:43:9F:C3:B5:76:1F:E5:44:7E:E5:DA:24:09
            X509v3 Authority Key Identifier:
                keyid:60:BB:F5:E5:4F:CB:6B:FB:6E:9B:D8:E5:2A:63:92:FA:F4:D4:C8:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/1/60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60BBF5E54FCB6BFB6E9BD8E52A6392FAF4D4C8D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kSHLUWcr9E6bRiqmKuAmHdMadUux4aV1KRMDETvP6ne/1/3136372e3234392e31372e302f32342d3234203d3e20323635313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:8a:61:5d:d3:2c:d2:aa:18:ec:c8:b7:9f:05:02:43:ba:29:
         93:04:3e:3f:1c:12:17:69:4c:4b:c5:fe:7b:86:f2:6d:83:fa:
         fc:cb:97:40:d3:3f:c5:d2:b8:ec:3e:d4:73:44:f4:9c:c3:b1:
         03:c7:2f:08:a0:03:72:1c:aa:e4:06:19:28:fd:98:dd:8a:08:
         00:95:50:69:36:fc:b1:fe:d0:4f:d0:2a:81:02:3b:a4:79:1c:
         55:dc:25:9d:5f:c0:51:95:1e:49:a6:55:ea:37:e4:ee:61:af:
         15:3e:fb:35:f2:ae:a2:d4:e2:47:20:03:2e:e8:ae:a1:6a:f6:
         03:5c:e3:67:8d:c5:98:5a:5d:14:86:6f:85:81:5d:24:a5:53:
         af:06:0d:0e:fe:f1:cd:6c:62:4b:d5:a0:72:57:f3:7b:9c:45:
         35:34:2b:24:e6:90:9e:fc:d5:ed:14:d5:32:bd:11:4c:5e:ee:
         0f:fe:99:81:7e:bc:fd:d8:f7:aa:1a:33:f9:f7:05:3d:d8:df:
         ea:e3:bf:cc:af:54:f6:20:5b:85:b4:69:c0:79:69:b8:b5:90:
         24:d4:d8:ee:d0:d7:6b:73:0e:99:b7:35:6d:b5:69:86:bc:d8:
         98:48:ae:4d:bb:a9:fa:f6:32:73:ed:11:ab:4f:0b:98:35:95:
         57:f5:97:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 20:04:03 2024 by rpki-client on console-ams.rpki-client.org